Privacy Policy – How maxwinmy Protects Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how maxwinmy ("we", "us", "the Platform") collects, uses, stores, and protects personal information provided by users ("you", "Member", "Player") of the maxwinmy online gaming platform, accessible at maxwinmy.win and all associated interfaces.

By registering a maxwinmy account, using the Platform, or making a deposit, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the maxwinmy Platform.

We are committed to handling your personal data with the same discretion and precision we bring to every aspect of the maxwinmy Platform — treating your information with the care of a private bank, not a mass-market data aggregator.

2. Who We Are

maxwinmy is an online gaming and sports betting platform serving the Malaysian market since 2020. For the purposes of this Policy, maxwinmy is the data controller responsible for the personal data of registered members. If you have questions about the data we hold, how it is processed, or how to exercise your rights, please refer to the contact details in Section 15 of this Policy.

3. Data We Collect

maxwinmy collects personal data through various points of interaction with the Platform. The categories of data we may collect include:

maxwinmy does not collect sensitive personal data such as racial or ethnic origin, political opinions, or biometric data beyond what is strictly required for identity verification under applicable regulations.

4. How We Use Your Data

maxwinmy uses personal data collected from members for the following purposes:

• Account Administration — creating, maintaining, and managing your maxwinmy account, including processing deposits, withdrawals, and transaction history.
• Identity & Age Verification (KYC) — verifying that you are at least 21 years of age and confirming your identity in accordance with our regulatory obligations.
• Fraud Prevention & Security — detecting and preventing fraudulent transactions, unauthorised account access, money laundering, and other prohibited activities.
• Customer Support — responding to your enquiries, resolving disputes, and providing technical assistance.
• Platform Improvement — analysing usage patterns to improve Platform performance, user experience, and game selection.
• Responsible Gaming — monitoring gameplay patterns and providing tools and interventions consistent with our responsible gaming obligations.
• Legal Compliance — meeting obligations imposed by applicable law, regulatory authorities, or court orders.
• Marketing Communications — where you have provided consent, sending you information about maxwinmy promotions, new game releases, and personalised offers.

5. Legal Basis for Processing

maxwinmy processes your personal data on one or more of the following legal bases:

• Contractual Necessity — processing required to perform our obligations under the Terms & Conditions you have accepted, including managing your account and processing payments.
• Legal Obligation — processing required to comply with applicable laws and regulations, including anti-money laundering legislation and age verification requirements.
• Legitimate Interests — processing carried out for the legitimate business interests of maxwinmy, such as fraud prevention, security monitoring, and platform analytics, where those interests are not overridden by your rights and freedoms.
• Consent — where you have provided explicit consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Third Parties

maxwinmy does not sell your personal data. We may share data with carefully selected third parties only in the following circumstances:

• Payment Processors — to facilitate deposit and withdrawal transactions via Touch 'n Go, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, and other approved Malaysian payment providers.
• KYC & Identity Verification Providers — to verify your identity and age as required under our compliance framework.
• Game Content Providers — certified game studios that supply live casino, slots, and sports betting content to the maxwinmy Platform may receive pseudonymised technical data as part of gameplay delivery.
• Fraud Prevention & Cybersecurity Services — third-party security providers who assist in protecting the Platform and its members from fraudulent activity.
• Regulatory & Law Enforcement Authorities — where required by applicable law or a valid legal process.

All third parties with whom maxwinmy shares personal data are required to process that data in accordance with applicable data protection laws and under contractual terms that provide equivalent protections to those described in this Policy.

7. Cookies & Tracking Technologies

maxwinmy uses cookies and similar tracking technologies on the Platform. The types of cookies we use are as follows:

• Essential Cookies — required for the Platform to function. These cannot be disabled without affecting Platform operation. They include session cookies that maintain your login state.
• Functional Cookies — store your preferences such as language settings, preferred game lobby view, and "remember me" login state.
• Analytics Cookies — collect anonymised data about how members use the maxwinmy Platform, enabling us to improve performance and usability. No personally identifiable information is transmitted via these cookies.

You can control cookies through your browser settings. Disabling essential cookies will affect your ability to use certain features of the Platform. For detailed information on managing cookies in your browser, refer to your browser's support documentation.

8. Data Security

maxwinmy implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the maxwinmy Platform.
• Encryption of personal data stored on maxwinmy's servers.
• Role-based access controls restricting employee access to personal data on a need-to-know basis.
• Regular independent security audits and penetration testing by certified cybersecurity professionals.
• Multi-factor authentication for administrative access to systems holding personal data.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, maxwinmy will notify affected members and, where required, the relevant regulatory authority in accordance with applicable notification obligations.

9. Data Retention

maxwinmy retains personal data for only as long as is necessary for the purpose for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Active Account Data — retained for the duration of your membership on the maxwinmy Platform.
• Closed Account Data — retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering and gaming regulatory requirements.
• Transaction Records — retained for seven (7) years for financial compliance purposes.
• Support Communications — retained for two (2) years following the closure of each support ticket.
• Marketing Consent Records — retained for three (3) years from the date of last interaction or consent renewal.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

10. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in respect of your personal data held by maxwinmy:

• Right of Access — you may request a copy of the personal data maxwinmy holds about you.
• Right of Rectification — you may request correction of inaccurate or incomplete personal data.
• Right of Erasure — in certain circumstances, you may request deletion of your personal data, subject to our legal retention obligations.
• Right to Restrict Processing — you may request that we limit processing of your personal data in specified circumstances.
• Right to Data Portability — where processing is based on consent or contract, you may request transfer of your data in a structured, machine-readable format.
• Right to Object — you may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the maxwinmy support team. We will respond within the timeframe required by applicable law, typically within 30 days of receiving a valid request.

11. Marketing Communications

maxwinmy may send you promotional communications — such as bonus offers, new game announcements, and platform updates — where you have provided explicit consent to receive them during registration or subsequently. All marketing emails from maxwinmy will include a clear unsubscribe mechanism. You may also update your marketing preferences at any time from your account settings or by contacting our support team.

Please note that operational communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not marketing communications and will be sent regardless of your marketing opt-in status.

12. Children's Privacy

The maxwinmy Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe a minor has accessed the maxwinmy Platform and provided personal data, please contact us immediately. Any accounts identified as belonging to individuals under the required age will be closed immediately and all associated data deleted, subject to our anti-fraud retention obligations.

13. Links to Third-Party Content

The maxwinmy Platform may contain links to game content provided by third-party studios. Once you leave the maxwinmy Platform by following any such link, this Privacy Policy no longer applies and maxwinmy is not responsible for the privacy practices of third-party sites or applications. We encourage you to review the privacy policies of any third-party services you engage with.

14. Updates to This Privacy Policy

maxwinmy reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where material changes are made, we will provide reasonable prior notice via the Platform or by email to your registered address. Continued use of the maxwinmy Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. The current version of this Policy is always accessible via the footer navigation on the maxwinmy Platform.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or maxwinmy's data processing practices, please contact our Data Protection team:

• Email: [email protected]
• Live Chat: Available 24/7 via the maxwinmy Platform.

This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions.